Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7b0d8ded-caf2-3547-9667-f95f1fadf307.roa
File:                     7b0d8ded-caf2-3547-9667-f95f1fadf307.roa (raw, json)
Hash identifier:          1TuYOujQYVuHAKNBdnwKTBIgYMy3TwBSw+OZbS1G74I=
Subject key identifier:   F4:90:2F:B8:2B:73:CD:93:70:65:DC:F9:B1:88:6B:10:84:D9:82:54
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858454D9D8047FE7090DE8C78E800
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7b0d8ded-caf2-3547-9667-f95f1fadf307.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     397630
IP address blocks:        147.53.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:80:47:fe:70:90:de:8c:78:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=21de6023-e3b8-4bcb-9d91-8b0db26e75d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:52:2a:86:14:c9:ec:b1:0a:5f:94:21:40:
                    07:35:ab:16:b5:d2:11:98:64:a0:3d:a4:24:e7:a8:
                    c3:c9:77:63:52:57:99:e0:b7:80:f9:6b:02:af:d6:
                    3f:a6:87:22:5e:00:cc:68:31:68:9e:37:21:c1:e6:
                    98:d1:51:65:56:12:aa:62:99:74:0f:67:16:99:52:
                    b7:ba:83:53:a0:59:7a:70:ef:81:45:64:51:87:d1:
                    0f:f5:70:34:15:08:3b:56:d9:5c:27:06:c1:02:80:
                    1c:c6:c6:25:91:ab:28:ff:9a:3f:d2:f8:e1:cd:af:
                    e2:76:07:7e:1e:6b:f6:48:c3:79:21:a6:05:e2:b0:
                    ce:5e:d7:47:b8:23:0c:41:22:d7:1f:4e:af:65:5a:
                    05:6f:88:76:b1:4d:1c:e1:00:c2:6b:cb:02:f4:61:
                    bd:5c:99:57:db:75:f5:05:33:6a:2a:7b:21:ff:36:
                    1d:c9:69:c7:60:d0:48:b2:6e:a8:e8:26:2f:19:f0:
                    e6:af:1f:b7:8a:74:f9:0a:b6:fa:0a:05:2b:01:8b:
                    b1:63:89:9f:b2:a5:c4:e0:b4:b4:e5:54:ce:b5:4c:
                    0e:ec:ae:94:48:14:3a:85:fc:44:62:34:a8:bf:c0:
                    29:34:82:e9:7e:cf:8f:37:bf:3f:b2:9a:54:e6:16:
                    f3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:90:2F:B8:2B:73:CD:93:70:65:DC:F9:B1:88:6B:10:84:D9:82:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7b0d8ded-caf2-3547-9667-f95f1fadf307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:3f:fc:87:2e:ca:7c:2c:d4:fa:14:b8:10:8c:61:26:b6:14:
         c8:1a:6d:cc:e3:29:ba:7e:9f:03:06:10:79:a2:3b:e9:60:74:
         69:7a:49:27:1f:e6:08:0f:2e:09:cb:06:33:a9:6b:a0:f1:c9:
         62:74:63:bf:6a:1f:05:16:93:dc:82:fe:01:a6:f6:db:b5:29:
         5e:63:81:74:cd:5f:f3:19:03:a7:a8:49:22:37:8f:12:ba:b3:
         97:67:a7:2c:b8:96:e5:80:e5:7c:c5:36:2b:9a:37:9a:24:b1:
         3f:22:e3:8b:57:ab:da:11:fa:86:5f:64:d9:74:05:73:21:2b:
         cc:10:73:fc:2d:bb:32:84:cd:4f:ae:b3:39:6c:83:d4:69:df:
         da:7c:82:0a:89:e4:83:45:1e:51:59:72:0a:9b:79:83:41:b6:
         32:5e:d9:f8:83:09:4c:50:5d:a1:6e:a9:84:27:6e:38:34:80:
         a2:74:76:37:6e:b2:78:ac:0c:7e:ad:e1:f5:0c:96:14:53:76:
         3d:45:fa:09:bc:e1:42:1f:fd:5b:5c:dc:8a:6a:f6:f7:1d:6f:
         11:8b:98:55:26:d4:8e:79:ba:13:09:68:5f:c8:25:89:7f:ce:
         f4:b7:71:88:9d:24:4a:a7:b2:aa:cb:ef:bd:cc:84:2a:1e:74:
         ad:a9:39:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:32:02 2024 by rpki-client on console-ams.rpki-client.org